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Top Stories 

• Five former associates of Bernard L. Madoff Investment Securities LLC, were convicted 
March 24 for their role in the company’s $17.5 billion Ponzi scheme, the largest such fraud 
in U.S. history. - Reuters (See item 4 ) 

• Officials confirmed the death toll from a March 22 mudslide in Arhngton, Washington, 
rose to 14 after 6 more bodies were found March 24, while the number of individuals listed 
as missing also rose from 108 to 176. - Associated Press (See item 10 ) 

• U.S. Navy officials reported that a civilian suspect approached the USS Mahan destroyer 
docked at Naval Station Norfolk in Virginia, disarmed a petty officer on watch, and fatally 
shot a sailor March 24 before being shot and killed by security forces. - Associated Press 
(See item 16 ) 

• Microsoft warned users March 24 of a zero day exploit for Microsoft Word and Outlook 
that can be used to deliver malicious code if a user opens or previews a message containing 
a specific .rtf file. - Krebs on Security (See item 21 ) 
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Energy Sector 



1. March 25, Reuters - (Indiana) Oil spills into Lake Michigan from BP refinery. BP 

PLC confirmed March 25 that an unknown amount of oil leaked from its Whiting 
refinery in Indiana into Lake Michigan after a mechanical error March 24. The 
discharge was stopped and the leak was contained while crews worked to clean up the 
spill and keep it from spreading. 

Source: http://www.reuters.corn/article/2014/03/25/refinerv-operations-bp-whiting- 
idUSLlN0MM0RQ20140325 

2. March 25, Associated Press - (Ohio) EPA says Ohio oil leak at 20K gallons. Sunoco 
Logistics announced March 24 that the Mid- Valley pipeline was repaired and reopened 
after a stretch of the pipeline was shut off from Hebron, Kentucky to Lima, Ohio, 
March 1 8 due to a leak. Federal environmental officials raised earlier estimates of 
crude oil that leaked from the pipeline into the Oak Glen Nature Preserve near 
Cincinnati to more than 20,000 gallons. 

Source: http://www.sanduskyregister.com/article/5458961 

T Return to top i 

Chemical Industry Sector 

Nothing to report 
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Nuclear Reactors, Materials, and Waste Sector 

Nothing to report 
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Critical Manufacturing Sector 

3. March 24, U.S. Department of Labor - (Pennsylvania) Danville manufacturer cited 
by US Labor Department’s OSHA for continued employee exposure to highly 
toxic hexavalent chromium. Truck trailer manufacturer Great Dane Limited 
Partnership was cited by the Occupational Safety and Health Administration for 
exposing workers at its Danville facility to hexavalent chromium, with proposed fines 
totaling $30,000. 

Source: 

https://www.osha.gov/pls/oshaweb/owadisp.show document?p table=NEWS RELEA 
SES&p id=25767 
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Defense Industrial Base Sector 



Nothing to report 
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Financial Services Sector 

4. March 25, Reuters - (National) Madoff aides convicted in $17.5 billion Ponzi trial 
after decades working for firm. Five former associates of Bernard L. Madoff 
Investment Securities LLC, were convicted March 24 for their role in the company’s 
$17.5 billion Ponzi scheme, the largest such fraud in U.S. history. 

Source: http://www.bloomberg.com/news/2014-03-24/madoff-aides-convicted-in-five- 
month-fraud-trial.html 

5. March 25, IDG News Service - (International) ATM malware, controlled by a text 
message, spews cash. Researchers at Symantec identified a new version of the Ploutus 
ATM malware that targets an undisclosed variety of standalone ATM and can be 
controlled by text message to make the ATM dispense cash. 

Source: http://www.networkworld.com/news/2014/032514-atm-malware-controlled- 
by-a-280030.html 

6. March 25, KEYC 12 Mankato - (National) Fairmont Police & Secret Service 
investigating credit card fraud. The Fairmont Police Department and the U.S. Secret 
Service are investigating over 200 reports of payment card fraud in 13 States that 
appear to be linked to a data compromise at El Agave in Fairmont, Minnesota. 

Source: http://www.kevc.com/storv/25064394/fairmont-police-secret-service- 
investigating-credit-card-fraud 

7. March 25, Denver Business Journal - (Colorado) Littleton homebuilder guilty of 
federal mortgage fraud. The former head of Golden Design Group Inc., was found 
guilty March 21 on charges of fraud and money laundering for running a mortgage 
fraud scheme that used unqualified or unwilling buyers to fraudulently obtain over $11 
million. 

Source: http://www.bizioumals.com/denver/news/2014/03/24/littleton-homebuilder- 
guiltv-of-federal-mortgage.html?page=all 
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Transportation Systems Sector 

8. March 25, KNBC 4 Los Angeles - (California) Drivers stuck in traffic after 42K 
pounds of honey spill on freeway. Four lanes of the 605 Freeway northbound in the 
city of Industry were temporarily closed March 24 for cleanup after a semi-truck 
carrying 42,000 pounds of honey overturned and leaked honey onto the freeway 
shoulder. Connectors from the 60 Freeway were also closed. 

Source: http://www.nbclosangeles.com/news/local/Big-Rig-Hauling-42K-Pounds-of- 
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Honey-0 verturns-on-605 -Freeway-25 205 1651 .html 



9. March 25, Ann Arbor News - (Michigan) M-14 closed near east U.S. 23 interchange 
after 3-vehicle crash; injuries reported. Westbound M-14 near the east interchange 
with U.S. 23 in Washtenaw County was closed March 25 after an accident involving 
two cars and a semi-truck that left 2 people injured. 

Source: http://www.mlive.com/news/ann-arbor/index.ssf/2014/03/m- 
14 closed near east us 23 in. html 

10. March 25, Associated Press - (Washington) Fire chief: Death toll from slide 
expected to rise. Officials confirmed the death toll from a March 22 mudslide in 
Arlington, Washington, rose to 14 after 6 more bodies were found March 24. The 
number of individuals listed as missing also rose from 108 to 176. 

Source: http://www.dispatch.com/content/stories/national world/20 1 4/03/25/mudslide - 
death-toll-at- 14-17 6-on-missing-list.html 
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Food and Agriculture Sector 

11. March 24, KUCB 89.7 FM Unalaska - (Alaska) Ammonia leak prompts evacuation 
at UniSea. A portion of the UniSea complex in Dutch Harbor was evacuated March 22 
after a cracked valve released ammonia into the air at the G2 plant. The leaking valve 
was shut off and the ammonia began to dissipate while officials tested the air quality. 
Source: http://kucb.org/news/article/ammonia-leak-prompts-evacuation-at-unisea/ 

12. March 22, Associated Press - (Nebraska) Authorities, ID Neb. grain elevator worker 
killed. A Midwest Farmer’s Co-Op worker was killed after an anhydrous ammonia 
explosion at the company’s Tecumseh grain elevator March 20. Three others suffered 
non-life threatening injuries. 

Source: http://columbustelegram.com/news/state-and-regional/authorities-id-neb-grain- 
elevator- worker-killed/article 42 1 Oc2d6-c9ea-5 5 20- 8 1 d2-ad040026f 8b3 .html 



For another story, see item 8 
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Water and Wastewater Systems Sector 

13. March 24, WSAZ 3 Huntington - (West Virginia) Boil water advisory issued for some 
in St. Albans, W. Va. About 400 West Virginia American Water customers in St. 
Albans were under a boil water advisory March 24 until further notice due to a water 
main break. 

Source: http://www.wsaz.com/news/headlines/Boil-Water-Advisory-Issued-for-Some- 
in-St-Albans-WVa-25210861 l.html 



For another story, see item 1 
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Healthcare and Public Health Sector 



14. March 24, WBAL 11 Baltimore - (Maryland) Fire evacuates Pikesville assisted living 
facility overnight. Authorities are investigating after residents from Springhouse 
assisted living facility in Pikesville were evacuated to another part of the building for 
more than 3 hours March 24 due to a fire. 

Source: http://www.wbaltv.com/news/fire-evacuates-pikesville-assisted-living-facility- 
ovemight/25 1 30942 

15. March 22, San Francisco Chronicle - (California) Theft of computers endangers 
data of 55,900 S.F. patients. The San Francisco Department of Public Health notified 
55,900 patients that their personal information may have been compromised after 
Sutherland Healthcare Solutions, a third party billing contractor, notified the officials 
March 18 that computers were stolen from the firm’s Los Angeles County office 
February 5. Health officials believe the eight computers that were taken contained 
patients’ personal information, including some Social Security numbers, and were 
unencrypted. 

Source: http://www.sfgate.com/health/article/Theft-of-computers-endangers-data-of- 
55-900-S-F-5339240.php 
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Government Facilities Sector 

16. March 25, Associated Press - (Virginia) Navy: Base shooting suspect didn’t have 
own weapon. U.S. Navy officials reported that a civilian suspect approached the USS 
Mahan destroyer docked at Naval Station Norfolk in Virginia, disarmed a petty officer 
on watch, and fatally shot a sailor March 24 before being shot and killed by security 
forces. Officials are investigating the incident. 

Source: http://www.washingtonpost.com/local/2-killed-in-shooting-at-naval-station- 
norfolk/2014/03/25/be4c3268-b3ee-lle3-bab2-b9602293021d story.html 

17. March 25, WSFA 12 Montgomery - (Alabama) Nearly 14,000 Auburn students, staff 
victims of cyber attack. Auburn University in Alabama notified 13,698 individuals, 
with ties to the university that its College of Business network was breached in a cyber 
attack and a hacker could have accessed the server between October 2013 and 
November 2013. The university patched the vulnerability and continues to investigate 
the incident. 

Source: http://www.wsfa.com/storv/25061953/aubum-university 

18. March 24, WBBJ 7 Jackson - (Tennessee) Bomb threat called in to Hardin County 
Courthouse, county jail. The Hardin County Courthouse in Savannah, Tennessee, was 
evacuated for more than 4 hours March 24 after 2 bomb threats were phoned in to the 
county clerk’s office and the sheriffs department. Police searched the courthouse and 
cleared the scene after nothing suspicious was found. 
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Source: http://www.wbbitv.com/news/local/Bomb-Threat-Called-In-To-Hardin- 
County-Courthouse-County-Jail-251945691.html 



19. March 22, Bergen County Record - (New Jersey) Norwood mayor: $1 million in 
damages expected after fire. A March 21 fire destroyed 2 buildings, 4 vehicles, and 
other equipment at the Norwood Public Works complex in New Jersey causing an 
estimated $1 million in damage. Authorities are investigating the cause of the fire. 
Source: http://www.northiersev.com/news/norwood-mayor-l-million-in-damages- 
expected-after-fire- 1 .749 114 
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Emergency Services Sector 

20. March 24, WAFF 48 Huntsville - (Alabama) Athens fire station reopens after winter 
storm damage. Athens Fire & Rescue firefighters moved back into Fire Station No. 1 
in Alabama March 24 after the building was closed in January due to extensive water 
damage from a sprinkler system that burst after a winter storm. 

Source: http://www.mvfoxal.com/storv/25058399/athens-fire-station-reopens-after- 
winter- storm-damage 



[ Return to top i 

Information Technology Sector 

21. March 24, Krebs on Security - (International) Microsoft: Oday exploit targeting 
Word, Outlook. Microsoft warned users March 24 of a zero day exploit for Microsoft 
Word and Outlook that can be used to deliver malicious code if a user opens or 
previews a message containing a specific .rtf file. Exploits have been seen attacking the 
vulnerability in Word 2010, but the issue is also present in other versions of Word. 
Source: http://krebsonsecuritv.com/2014/03/microsoft-wai'ns-of- word-20 10-exploit/ 

22. March 24, Help Net Security - (International) 10,000 GitHub users inadvertently 
reveal their AWS secret access keys. Researchers at Threat Intelligence reported that 
around 10,000 Amazon Web Services secret access keys are able to be found on 
GitHub via a search as some users have accidentally uploaded them to their project 
pages. 

Source: http://www.net-securitv.org/secworld.php?id= 16566 

23. March 24, Help Net Security - (International) Basecamp gets DDoSed and 
blackmailed. Basecamp was disrupted and made unavailable for several hours March 
24 after it was hit by a distributed denial of service (DDoS) attack before the attack was 
mitigated. The attackers demanded a ransom similar to recent attacks on other services, 
which was not paid. 

Source: http://www.net-security.org/secworld.php?id=16565 
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Internet Alert Dashboard 



To report cyber infrastructure incidents or to request information, please contact US-CERT at soc@us-cert.gov or 
visit their Web site: http://www.us-cert.gov 

Information on IT information sharing and analysis can be found at the IT ISAC (Information Sharing and 
Analysis Center) Web site: http://www.it-isac.org 
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Communications Sector 

Nothing to report 
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Commercial Facilities Sector 

24. March 25, Associated Press - (Connecticut) 4 injured when car crashes into 
Connecticut store. Four people were injured after a motorist lost control of her vehicle 
March 24 and plowed into 5 vehicles, before crashing into a convenience store in 
Fairfield. 

Source: http://www.ktvl.com/template/inews wire/wires .national/22ea029e- 
www.ktvl.com.shtml 

25. March 25, WRC-TV 4 Washington, D.C. - (Virginia) Four injured in Fairfax 
apartment fire. Officials are investigating after a fire broke out March 24 at a Fairfax 
apartment building, leaving 4 people injured and 25 residents displaced. 

Source: http://www.nbcwashington.com/ncws/local/Four-Iniurcd-in-Fairfax- 
Apartment-Fire-25209 1571 .htrnl 

26. March 24, Washington Post - (Virginia) CO leak in Falls Church sends 10 to 
hospital. HAZMAT crews responded March 24 to a carbon monoxide leak at an office 
building in Fairfax County which sent 10 people to an area hospital for possible carbon 
monoxide poisoning. The cause of the leak is under investigation. 

Source: http://www.washingtonpost.com/local/crime/co-leak-in-falls-church-sends-10- 
to-hospital/2014/03/24/a5f0e77c-b39e-lle3-b899-20667de76985 story.html 

27. March 24, San Angelo Live - (Texas) Suspect shot in Walmart incident. Police shot 
and wounded a man suspected of threatening a San Angelo Walmart employee with an 
explosive device as he attempted to steal a rifle from the store’s sporting goods section 
March 24. The store remained closed for several hours while police investigated and 
cleared the scene. 

Source: http://sanangelolive.com/news/san-angelo/2014-03-24/suspect-shot-walmart- 
incident 

28. March 24, Associated Press - (New Jersey) Prosecutor: Smoking caused NJ fire that 
killed 4. Ocean County authorities announced March 24 that a cigarette discarded in a 
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stuffed chair was to blame for a fire at the Mariner’s Cove Motor Inn in Point Pleasant 
Beach March 22 that left four people dead and eight others injured. 

Source: http://news.msn.com/us/prosecutor-smoking-caused-ni-fire-that-killed-4-l 

29. March 24, WSIL 3 Harrisburg - (Illinois) Suspicious package forces evacuation. The 
FBI is investigating after a mysterious package was discovered at the WSIL 3 
Harrisburg news station March 24, forcing the station to evacuate for more than 3 
hours. Officials cleared the scene after determining no explosives or hazardous 
materials were present. 

Source: http://www.wsiltv.com/news/local/Suspicious-Package-Forces-Evacuation- 
251965541.html 
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Dams Sector 



30. March 25, Sacramento Bee - (California) U.S. Army Corps eases up on its stance 
against trees on levees. The U.S. Army Corps of Engineers announced a new interim 
policy March 24 stating that it will not disqualify levees that fail to meet its 
maintenance criteria from receiving disaster relief funding, granting reprieve to 
thousands of miles of California riverside habitat. 

Source: http://www.sanluisobispo.com/2014/03/24/2988263/armv-corps-eases-up-on- 
its-stance.html?sp=/99/177/348// 
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Department of Homeland Security (DHS) 

DHS Daily Open Source Infrastructure Report Contact Information 



About the reports - The DHS Daily Open Source Infrastructure Report is a daily [Monday through Friday] 
summary of open-source published information concerning significant critical infrastructure issues. The DHS Daily 
Open Source Infrastructure Report is archived for 10 days on the Department of Homeland Security Web site: 
http://www.dhs.gov/IPDailyReport 

Contact Information 

Content and Suggestions: Send mail to cikr.productfeedback@hq.dhs.gov or contact the DHS 

Daily Report Team at (703) 942-8590 

Subscribe to the Distribution List: Visit the DHS Daily Open Source Infrastructure Report and follow 

instructions to Get e-mail updates when this information changes . 

Removal from Distribution List: Send mail to support @ govdelivery.com . 



Contact DHS 

To report physical infrastructure incidents or to request information, please contact the National Infrastructure 
Coordinating Center at nicc@hq.dhs.gov or (202) 282-9201. 

To report cyber infrastructure incidents or to request information, please contact US -CERT at soc@us-cert.gov or visit 
their Web page at www.us-cert.gov . 

Department of Homeland Security Disclaimer 

The DHS Daily Open Source Infrastructure Report is a non-commercial publication intended to educate and inform 
personnel engaged in infrastructure protection. Further reproduction or redistribution is subject to original copyright 
restrictions. DHS provides no warranty of ownership of the copyright, or accuracy with respect to the original source 
material. 
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